Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e31312e302f32342d3234203d3e20313336373837.roa
File:                     3135352e3133332e31312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          BPHB+W7mr/7dbk80eZonkCU7Fxup+wWxmWknc8XYhrc=
Subject key identifier:   C6:AA:57:B3:26:32:3D:29:51:CA:F6:FD:33:6C:47:82:3F:F1:EE:51
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       63028D8F1ED2685C72860F7ECCC3C526231AC983
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e31312e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:27 +0000
ROA not before:           Sat 22 Oct 2022 04:29:27 +0000
ROA not after:            Sat 21 Oct 2023 04:34:27 +0000
asID:                     136787
IP address blocks:        155.133.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:02:8d:8f:1e:d2:68:5c:72:86:0f:7e:cc:c3:c5:26:23:1a:c9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:27 2022 GMT
            Not After : Oct 21 04:34:27 2023 GMT
        Subject: CN=C6AA57B326323D2951CAF6FD336C47823FF1EE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:a9:49:5c:08:b2:95:04:c9:4e:bf:9f:05:
                    d8:5d:c3:7c:27:e3:07:77:8c:c0:84:0a:be:06:3b:
                    67:ce:ab:c2:2d:98:18:a7:2d:0a:3e:4e:fb:a0:f7:
                    b5:9d:c8:f6:4b:1a:60:6e:ba:09:72:db:bc:b3:7a:
                    bf:6a:8a:77:84:67:f5:6f:32:ef:97:46:99:85:cf:
                    e7:83:12:4c:4c:e9:ad:8b:4f:6a:a6:e8:96:e6:b7:
                    d6:53:37:56:2d:75:a7:0c:80:30:0b:e0:88:00:16:
                    14:93:61:6a:a3:a2:3d:dd:a6:97:c1:6e:46:36:11:
                    26:cf:04:50:54:03:9e:0d:43:a1:d6:e6:ca:93:70:
                    eb:cd:2f:71:f6:67:1a:f6:02:a6:ab:c6:a1:09:50:
                    14:45:2d:e4:6c:bb:4a:17:79:f8:66:74:2e:32:28:
                    cb:92:ca:b5:79:c0:5c:cd:1d:05:3f:3b:ce:67:61:
                    0c:80:d7:ff:84:66:e9:4d:2e:1b:b9:8a:13:be:8c:
                    c3:a2:e4:91:70:a9:fd:01:f1:28:c9:1c:fe:50:27:
                    37:d5:4e:a5:84:78:0b:48:6f:d0:5c:09:3d:6c:b1:
                    29:4c:96:3b:d3:54:e6:b7:5b:1f:38:1c:97:91:3d:
                    41:d9:06:b6:be:54:6d:03:7f:ef:8f:be:bd:e3:4b:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AA:57:B3:26:32:3D:29:51:CA:F6:FD:33:6C:47:82:3F:F1:EE:51
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e31312e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:42:24:ff:08:1b:e5:47:97:ab:41:9b:75:8d:9a:d1:61:
         ba:90:9e:c4:cb:91:fc:97:ab:9b:b8:cf:a1:3b:3e:65:b5:bd:
         46:54:26:6b:09:77:4e:6f:23:38:87:cf:4f:e6:ed:5e:4d:47:
         ff:db:dc:d9:15:5c:a3:77:e2:78:b4:4b:21:1a:93:ec:8a:91:
         ea:79:4e:35:d5:ac:24:73:e9:a6:e8:f6:05:05:bd:76:89:2b:
         a1:50:36:12:26:cd:b2:eb:16:9e:19:d6:94:4f:e7:72:a8:69:
         7a:8c:36:81:78:fd:da:bd:7a:86:df:18:22:af:d8:c6:9f:10:
         be:7f:43:31:14:7a:60:9e:d3:12:1d:67:1c:f9:70:07:2c:55:
         99:bd:25:c6:f0:04:ac:2b:22:3f:7e:e2:0d:5e:b9:bb:6d:67:
         d6:0e:10:27:a9:02:b9:d0:90:e6:dc:f4:a2:88:78:b5:87:cd:
         c7:ed:f2:8c:ae:de:be:47:60:cc:fc:2b:81:e6:70:fd:78:1a:
         fd:98:d6:91:93:1f:f5:9f:41:3c:c5:cf:61:72:86:e8:3b:34:
         4c:26:16:28:8a:46:0d:5d:58:31:a8:7f:16:d4:d3:b2:f3:e8:
         91:e4:36:d6:d0:7b:c3:99:20:ea:89:76:da:72:b3:f5:51:e6:
         11:34:f4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net